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(57) Abstract 

Credit card blanks 
are manufactured with a 
plurality of random, secure 
codes (24) such as randomly 
applied infrared readable 
bits. A card encoding ap- 
paratus (B) includes a se- 
cure code reader (32) for 
reading the secure code 
from one of the blanks. The 
secure code andaccount in- 
formation are operated on 
by an encoding algorithm 
(36, 38) to generate a verifi- 
cation code which is elec- 
tromagnetically recorded 
(40) or embossed (42) on 
the card. In conjunction 
with a credit card transac- 
tion, the merchant passes 
the credit card past an elec- 
tromagnetic read head (50) 




and an infrared read head (52) to read the electronically encoded account information, verification code, and secure code. 
A keyboard (54) enables the merchant to manually enter this data if the electromagnetic recording should be unreadable. 
The verification apparatus operates on the account information with a verification algorithm (66, £S y 70) to generate an 
answer corresponding to the verification code. If the answer and verification code match, an authentication code genera- 
tor (82) generates an authentication code which is displayed on an LCD dot matrix display (56) and handwritten by the 
merchant on the receipt 
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FRAUDULENT CARD INTERCEPT SYSTEM 
Background of the Invention 
The present invention relates to the art of document 
and financial transaction security* It finds particular 
application in conjunction with the prevention and 
detection of counterfeiting* and alteration of charge or 

5 credit cards. It is to be appreciated that the invention 
has broader applications including identification cards, 
banking and money transfer cards, passports, key cards 
and other documents and structures which are to be 
monitored and protected against alteration and forgery. 

10 Substantial amounts of goods and monies are stolen 
each year through fraudulent credit card transactions. 
The fraudulent credit card transactions are aided not 
only by the thief who steals credit cards, but also by 
dishonest merchants, dishonest bank employees with access 

15 to credit card account information, counterfeiters, 
credit card alterers,* forgers, and the like. 

Various techniques have been suggested to stop or 
reduce credit card fraud. However, an effective 
technique which operates within the physical parameters 

20 of conventional credit cards has proven elusive. One 
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suggested technique was to provide an electromagnetic 
recording of account information on the card. * Another 
technique was to embody a structure within the plastic of 
the card which rendered it difficult to alter or 
reproduce. For example, it has been suggested that thin 
threads be embedded in the plastic, holographic images be 
^ P Xi^_on^he^^c^and-th^lceT--I n another 



- - — j-xxvc. in ano tner 

technique, the cardholder was assigned a personal 

10^ f iCati ° n nUmber WMch WaS COfflpared wit « * Personal 
^identification number stored at the bank or credit card* 
headquarters to verify that the true card owner was 
undertaking the transaction. 

Each of these techniques have had its drawbacks. 
Electromagnetically coded inf orma.tion-ha-s-been-f ound-to- 
ISbe partially erased or otherwise rendered unreliably 
readable in a significant percentage of legitimate 
credit cards. Placing alledgely unalterable structures 
in^the plastic of the card has required counterfeiters 
and alterers to improve their skills but has stopped 
"neither counterfeiting nor altering. Moreover, such 
techniques have tended to be expensive. Personal 
identification numbers have been stolen by dishonest 
bank employees and remembered by merchants, who also 
retain the other account information on the sales 
receipt. Further, merchant verification of every credit 
card transaction has been considered by many to be too 
time consuming to be acceptable. 

The present invention provides an improved credit 
card and verification technique which overcomes the 
30above-referenced problems and others. 

Summary of the Invention 
In accordance with the present invention, there is 
provided a method and apparatus for intercepting lost 
stolen, and fraudulent documents. 
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In accordance with one aspect of the present 
invention, a method of electronically verifying the 
authenticity of credit cards is provided. Each card is 
marked with account information and a verification 

5 code. To verify the authenticity of a credit card, at 
least one of the account code and the verification code 
is operated upon electronically by a preselected 
verification algorithm to determine whether or not the 
card is authentic. 

10 i n accordance with another aspect of the present 

. invention, a plurality of credit card blanks are 
manufactured, each blank having one of a plurality of 
relatively permanent, machine-readable secure codes. A 
secure code of a selected one of the credit card blanks 

15 is machine read. Electronic account information of a 
customer for whom a credit card is to be prepared is 
received. At least a portion of the account information 
and the machine-read secure code are electronically 
operated upon with an encoding algorithm to generate a 

20 verification code. It might be noted that the generated 
verification code is unique not only to the account 
number but also to the selected, securely encoded credit 
card blank. At least a portion of the account 
information and the verification code are encoded on the 

25 selected blank to prepare the credit card. 

In accordance with another aspect of the present 
invention, the method includes electronically, entering 
the account information and the verification code and 
machine-reading the secure code from a credit card. At 

30 least a portion of the account information, the 
verification code and the secure code are operated upon 
by the verification algorithm to generate an answer. 
The answer is compared with at least a portion of the 
verification code and the account information from the 

35 credit card. . 
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In accordance with yet another aspect of the present 
invention, at least a portion of the account information 
and other electronic data are operated upon by an 
authentication algorithm to generate an authentication 
code. The authentication code is displayed and marked 
on a transaction recei pt 



In accordance with another aspect of the invention, 
an- apparatus for verifying the authenticity of credit 
, cards is provided. An encoding means encodes each of a 
Plurality of cards with account information and a 
venfxcation code. A verification means operates on at 
least a portion of the account information and the 
verification code with a verification algorithm to 
generate an answer. The answer is compared with a 
preselected portion of the verification code and • account 
information to ascertain authenticity of the card. 

In accordance with a more limited aspect of the 
present invention, a source of credit card blanks 
provides blanks each of which has one of a plurality of 
^relatively permanent, machine-readable secure codes. A 
secure code reading means selectively reads the secure 
codes of one of the blanks. An encoding algorithm means 
receives account information data of a customer for whom 
a credit card is to be prepared and the machine-read 
secure code and operates thereon with a preselected 
encoding algorithm to generate a verification code. A 
card encoding means encodes the blank with at least a 
portion of the account information and the verification 
code to produce a credit card/ The blank may be encoded 
by embossing, electromagnetic recording, printing, or 
the like* 

In accordance with another aspect of the present 
invention, there is provided an electronic verification 
• apparatus which includes means for electronically 
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entering at least a portion o£ the account information 
and the verification code. A secure code reader reads 
the secure code from the credit card. A verification 
algorithm means electronically operates on at least a 

5 portion of the received account information, the 
verification code, and secure code to generate an 
answer. The verification apparatus may either 
electronically compare the generated answer with a 
portion of the verification code or account information 

10 from the credit card or may display the generated answer 
for human comparison. 

In accordance with another more limited aspect of 
the invention, the verification apparatus includes an 
authentication code generator. In response to a 

15 satisfactory comparison of the answer with the portion 
of the verification code or account information, an 
authentication algorithm means operates on at least a 
portion of the account information and other electronic 
data to generate an authentication code. 

20 one advantage of the present invention is that it 

intercepts altered, counterfeit, and fraudulent credit 
cards . 

Another advantage of the present invention is that 
it inhibits counterfeiting and altering of credit cards 
25 and other protected documents. 

Another advantage of the present invention is that 
it inhibits merchant collusion in conjunction with the 
acceptance of altered or counterfeit credit cards. 

Still further advantages * will become apparent to 
30 those of ordinary skill in the art upon reading and 
understanding the following detailed description. 
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Brief Description of the Drawings 

The invention may take form in various steps and 

arrangements of steps or in various parts and 

arrangements of parts. The drawings are only for 

purposes of illustrating preferred embodiments of the 
invention and are not to be construe d as limiting it. 



FIGURE 1A illustrates an obverse face of a credit 
card in accordance with the present invention; 

FIGURE IB illustrates a reverse face of the credit 
card of FIGURE 1A; 

10 FIGURE 1C illustrates an electromagnetic encoding 

scheme for the credit card of FIGURES 1A and IB; 

FIGUR E 2 is a diagramatic illustration of a credit 

card encoding system in accordance with the present 
invention; . 

15 FIGURE 3 is a perspective view of a card 

verification apparatus in accordance with the present 
invention; 

FIGURE 4 is a diagramatic illustration of the card 
verification apparatus of FIGURE 3; 
20 FIGURE 5 is an exploded view of an alternate 

embodiment of a credit card in accordance with the 
present invention; 

FIGURE 6 illustrates an alternate embodiment of 
coding scheme for electronically coding account and 
verification codes on the credit card; and, 

FIGURE 7 is a circuit diagram of an alternate 
embodiment of a card verification apparatus. 

Detailed Description of the 
Preferred Embodiments 

With primary reference to FIGURES 1A, IB, and 1C, a 
credit card A is encoded with account information 
including an embossed name 10 of the account owner, an 



a 



30 



WO 85/02927* 



-7- 



[T/US84/P2129 



embossed account number 12, and- a printed expiration 
date 14. On an electromagnetic strip 16, the card, is 
electromagnetically coded with a start code 18 to mark 
the beginning of the electromagnetic encoding, account 

5 information data 20, and a verification code 22. The 
electronic account information preferably includes an 
account number 12a, an expiration date 14a, and a 
service code which indicates the country or geographic 
area in which the account owner resides: The service 

10 code is of particular importance in countries which have 
restrictions on the international transfer of currency. 
The verification code 22 includes a parity check for 
checking the parity of the preceeding 

electromagnetically encoded information to determine 

15 whether it has been altered. The verification code 
further includes a card identification number (CIN) 26a 
and optionally may include a personal identification 
number (PIN) . 

The card A further includes a machine-readable, 
20 secure code 24. The secure code is applied to the card 
or integrally formed therewith in such a manner that the 
card is physically altered with an alteration of the 
secure code. In the preferred embodiment, the secure 
code is digitally encoded with an infrared code. 
25 Preferably, the infrared code is masked with an infrared 
invisible, optically opaque mask, such as 
electromagnetic recording jtrip 16. Optionally, other 
secure coding techniques may be implemented, such as a 
water mark encoding, a high spectrum infrared encoding, 
30 light signatures, and the like. To insure that a 
verification code is available even if the magnetic 
strip should become erased or otherwise unreadable, an 
alpha-numeric, man-readable verification code or card 
identification number 26 is embossed or printed on the 
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face of the card. In the preferred embodiment, the 
electromagnetic and the man-readable verification codes 
are different to inhibit the fraudulent re-recording of 
5 the electromagnetic strip based on man-readable 
information carried on a credit card. 

With particular refe renced to F-IGURE 2-, each c-r-ed-i-t 

card A is uniquely encoded by a card encoding apparatus 
B with the information set forth above in conjunction 
with FIGURES 1A, IB, and 1C. During manufacture, credit 
card blanks each including a flat, unembossed plastic 
layer, are printed with the expiration date 14, encoded 
with the secure code 24 and laminated with the 
electromagnetic strip 16. Preferabl y , the secure 
is a randomly applied one of a large plurality of secure 
codes to inhibit determination of the secure code based 
on other information which is electromagnetically or 
man-readably encoded on the card. 

Each card blank from a source 30 of card blanks is 
moved through a secure code reader 32 which reads the 
secure code carried thereby. An account information 
latch or memory 34 receives electronic account 
information for the customer for whom the credit card is 
being manufactured. Typically, the account information 
is received from a central computer in which the 
customer account information is stored. A first or 
machine -readable encoding algorithm means 36 operates on 
the account number and the secure code with a first 
preselected encoding algorithm to derive the 
machine-readable verification code 22, particularly the 
card identification number 26a. Various algorithms . may 
be implemented. For example, the secure code may 
indicate preselected mathematical or semi -mathematical 
operations. Digits from the account number may be 
operated on by the indicated mathmatical or 
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semi-mathmatical operations. Mathmatical operations may 
include multiplying, dividing, squaring, and other 
mathmatical operations. The semi-mathmatical operations 
may include transposing digits, utilizing digits for 
5 addresses in a look-up table, and other such operations 
which manipulate and transform one or more digits 
predictably and reproducably into other digits or groups 
of digits. 

A second or man-readable encoding algorithm means 38 
10 is of analogous construction with the first algorithm 
means 36. It implements a second encoding algorithm 
which includes one or more mathmatical or 
semi-mathmatical operations on the received data to 
produce the man-readable verification code 26. In the 
15 preferred embodiment, the machine-readable and 
man-readable verification codes are related to the 
account number and the secure code by different 
algorithms. 

The first algorithm means 36 and the account 
20 information memory 34 are connected with an 
electromagnetic recorder 40 which records the start code 
18, the account information 20, and the machine-readable 
verification code 22 on the electromagnetic strip 16. 
The second algorithm means 38 and the account 
25 information memory 34 are connected with an embossing 
machine or other machine for providing the man-readable 
indication of the account information 10, 12, 14 and the 
verification code 26. In this manner, each credit card 
is encoded with" account information and a verification 
30 code which is related to the account information by a 
secret encoding algorithm. 

With reference to FIGURES 3 and 4, merchants who 
accept the credit cards are provided with a credit card 
verification apparatus or box C. The credit card 
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verification apparatus ascertains whether the 
machine-readable and the man-readable verification codes 
could have been generated from the secure code and the 
account information presently encoded on the card. The 
verification apparatus includes an electronic entry 
means for entering the ac count information and 



verification code from the card. In the preferred 
embodiment, electronic entry means includes an 
electromagnetic read head 50, such as found in a tape 
recorder, for reading the electromagnetically encoded 
information on this strip 16 and a secure code read head 
5 2 such as an infrared data read head, for reading the 
infrared encoded secure code 24. 
' The electronic entry means further includes a 

keyboard S4 on which a human operator enters the 
embossed account information and verification code from 
the credit card. The keyboard provides for the entry of 
account information and verification code information 
from cards whose electromagnetic strip is damaged or 
otherwise unreadable by the electromagnetic read head 
SO. Optionally, other devices may be implemented for 
reading the secure code, the account information, and 
the verification code. For example, mechanical readers 

may be utilized to read the embossed characters, or the 
" like . 

A man-readable display 56 such as a dot matrix, LED 
or LCD display is caused by the verification apparatus 
to display various verification information. For 
example, account information, such as the "account number' 
as read electromagnetically from the card, is displayed 
for the merchant to compare with the embossed account 
number on the card. Various codes which indicate that 
the card has been altered or is otherwise unacceptable 
are s lectively displayed. Further, the man-readable 
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display displays an authentication code which the 
merchant writes on the sales slip to show that the 
credit card has, in fact, been passed through the 
verification apparatus and has passed the appropriate 

S tests. As explained in greater detail herein below, the 
authentication code is based on account information, a 
serial number or identification of the specific 
verification apparatus, and a number which varies from 
transaction to transaction, e.g. a clock or time signal, 

10 a dollar amount of the transaction, a sequence number of 
the transaction, or the like. The relative 
unpredictability of the authentication code based on 
these factors prevents a dishonest merchant from 
accepting bad credit cards and utilizing account: 

15 information and authentication codes from a legitimate 
sale at a subsequent time. 

With particular referience to FIGURE 4, the 
electromagnetic read head 50 is operatively connected 
with an electromagnetic code presence detector 60 which 

20 detects whether or not there is readable electromagnetic 
data on the strip 16. If the strip is blank or 
unreadable, the electromagnetic code presence detector 
causes a display generator 62 to generate a display on 
the display 56 which indicates that no electromagnetic 

25 code is present. 

A data sorting and temporary storage means 64, such 
as a plurality of registers or latches, receives and 
temporarily stores the secure code, the account 
information, and the verification code information 

30 whether entered through the read heads 50, 52 or the 
keyboard 54. The sorting and temporary storage means 
may include a plurality of registers which are filled in 
a preselected ord r as the card moves past the read head 
or as the merchant keys in information. Appropriate 
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data separation bits on the tape strip 16 and the entry 
o£ non-numeric data separation instructions by the 
merchant, e.g. with the asterisk (.*) key, may index the 
next register. The data sorting and storing means 64 is 
connected with three verification algorithm means 66, 
68^ , and 70 which operate .on all or part of the entered 



data with appropriate verification algorithms to 
. determine the authenticity * of. the card. The 
verification algorithms may be the same as the encoding 

10 algorithms or may be mathematically related to the 
encoding algorithms in such a manner that the 
verification algorithms determine that the" encoding 
algorithm could have or could not have generated the 
verification code from the account and other information. 

15 encoded on the card. 

The first verification algorithm means 66 operates 
on the machine-read secure code 24 and one of the 
electromagnetically read account information 20 and the 
the verification code 22 with a first verification 

20 algorithm to generate a first answer code. The first 
verification algorithm is analogous to the encoding 
algorithm implemented by the first encoding algorithm 
means 36 to encode the card. A first comparing means 72 
compares the first answer with the other of the 

25 verification code 22, particularly . the card 
identification number, and a portion of the account 
information read electromagnetically from the card and 
produces an enable signal when they match. When the 
first comparing means fails to find a match, an 

30 appropriate display generator 74 generates an 
appropriate display indicitive of an unacceptable card. 
In the preferred embodiment, the first verification 
algorithm means operates on the secure code and the 
account information and the first comparing means, 

35 compares the first answer with the v rification code. 
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The second verification algorithm means 68 
implements a second verification algorithm analogous to 
the encoding algorithm implemented by the second 
encoding algorithm means 38. The second verification 

5 algorithm operates upon the keyboard entered account 
information and the machine-read secure code 24 to 
generate a second answer/ A second comparing means 74 
compares the second answer with the keyboard entered 
verification code and produces an enable signal when the 

1° two match. If there is no match, the second comparing 
means 76 causes the unacceptable card display generator 
74 to generate the appropriate display. Optionally, the 
second verification algorithm may operate on the 
verification code or portions of both the verification 

15 code and account information and the second answer may 
be compared with a portion of the account information or 
portions of the account information and the verification 
code. 

For security, it is preferred that the verification 
20 algorithms 1 are not identical to the encoding 
algorithms. Rather, the verification algorithm may be 
only a sufficient portion of the corresponding encoding 
algorithm or sufficiently analogous that the comparing 
means determines that the secure code and account 
25 information could have generated the verification code 
read from the card. For example, the verification 
algorithm may work with fewer significant digits than 
the encoding algorithm or may include a portion of (<i an 
encoding algorithm look-up table. Different merchant 
30 verification apparatus C may include different portions 
of the encoding algorithm. In this manner, if the 
verification algorithm of one merchant verification 
apparatus is decoded or broken, the decoded verification 
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algorithm cannot be used to produce cards that will be 
accepted by all verification apparatus. Optionally, the 
verification algorithm and comparing means may operate 
on the received information in other manners which 
5 determine whether or not the verification code, account 
information, and secure c ode could have come from a card 



encoded in accordance with the encoding circuit of 
FIGURE 2 and the first and second encoding algorithms. 

The third algorithm means 70 is provided for cards 

10 which have no secure code. Many prior art credit cards 
include an electromagnetically recordable strip but no 
secure code. These prior art cards can be encoded with 
an electromagnetic encoding scheme analogous to that 
shown in FIGURE 1C immediately, without replacement with 

15 securely encoded card blanks. Although the all 
electromagnetic encoding scheme provides improved 
security relative to the prior art, it is not as secure 
as the secure code preferred embodiment. However, it is 
advantageous and may be implemented alone or as a 

20 transition between the prior art and the preferred 
embodiment. 

During encoding, the first encoding algorithm 
receives no secure code and generates a corresponding 
machine-readable verification code 22 or card 

25 identification number, based only on the account 
information. The third verification algorithm means 70 
operates on the account inf ormationor verification code 
with a third verfication algorithm" analogous to the 
first encoding algorithm to generate a third answer. A 

30 third comparing means 78 compares to the third answer 
from the third algorithm means 70 with the verification 
code 22, or a portion of the account information read 
from the card. If these two match, an enable signal is 



WO 85/02927/ 



15- 



'/US84/02129 



generated. If these two do not match, the unacceptable 
card signal 'generator 74 generates an appropriate 
display. 

when a credit card passes the verification tests and 

5 a enable signal is generated by one of the comparing 
means, an account number display generator 80 is enabled 
to display the account number as electromagnetically 
read from the card or key entered, as may be the case. 
After the merchant manually compares the account number 

10 on display 56 with the embossed account number 12 on the 
card, the merchant makes an appropriate entry on the 
keyboard 54 to indicate that the two account numbers 
match. The match signal from the keyboard and the 
enable signal from the comparing means enable an 

15 authentication code generator 82 to generate an 
appropriate authentication code. 

The authentication code generator includes an 
authentication code algorithm means 84 which operates on 
received data with a preselected authentication 

20 algorithm to generate an appropriate authentication 
code, in the preferred embodiment a five digit alpha 
numeric code. In a preferred embodiment, the 
authentication code generator 82 receives account 
information from the data sorting and temporary storage 

25 means 64, the serial number of the verification 
apparatus from an appropriately encoded serial number 
memory 86, and a time signal from a clock 88. The time 
signal may be based on the time of day, the number of 
transactions performed, the date, or the like. The 

30 clock signal assures that the authentication code will 
change from time to time to prevent a dishonest merchant 
from preparing a fraudulent sales slip charging a second 
or subsequent sale to an earlier bona fide customer. 
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Optionally, the authentication algorithm means 84 
may be connected with the keyboard by way o£ a currency 
value latch 90 for receiving the dollar or currency 
amount of the sale. Incorporating the currency amount 
of the sale again insures that the same customer's 
account when used with the same merchant verification 
apparatus will normally not generate the same 
authentication code twice. Optionally, a random number 
generator 92 may also supply input data to the 
authentication code algorithm to render it even more 
unlikely that a customer will twice receive the same 
authentication code, even on two sequential sales for 
the same dollar amount. Further, the random number 
-generator 9*2 renders" it more difficult to break the 



10 



20 



15 authentication code algorithm by those who would seek to 
create a fraudulent verification apparatus. 

Ah authentication code display generator 94 causes 
the display 56 to display the authentication code from 
the authentication algorithm means 84. The merchant 
manually writes the authentication code on the credit 
card receipt. If questions should arise as to the 
authenticity of a transaction, a like authentication 
algorithm means located at the offices of the credit 
card company can be programmed to receive the same input 
25 data. The serial number is determinable from company 
records and the time signal from other contemporaneous 
credit^ card receipts, authentication codes of the same 
merchant verification apparatus, and the like. Even if 
the random number, generator is used, a determination can 
30 still be made whether or not the authentication code 
generator could have generated the authentication code 
appearing on the receipt. For example, the random 
number generator may randomly generate one digit 
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numb rs, i.e. 0 through 9, which the authentication 
algorithm adds to the four digit authentication code as 
the last step. In this manner, there are only 10 four 
digit authentication codes which could have been 

5 generated legitimately. 

FIGURE .5 illustrates an alternate embodiment of a 
credit card construction in accordance with the present 
invention. The charge or credit card includes a 
laminated body portion 100 having a core 102, thin 

10 printed layers 104, 106 and clear plastic outer layers 
108, 110. An electromagnetic recording strip 112 which 
includes layers of low coercivity magnetic material 114 
and high coercivity magnetic material 116 is hot stamped 
or otherwise laminated to the card body portion. The 

15 low coercivity layer includes magnetic dipoles which may 
be selectively oriented and re-oriented. The high 
coercivity magnetic layer includes magnetic dipoles 
which require at least 1200 to 4500 gauss per square 
centimeter to cause the dipoles to align with the 

20 magnetic field. Moreover, although the dipoles are 
random in the virgin high coercivity material, once 
aligned, they cannot be returned to their random 
arrangement, but only can be re-oriented substantially 
uniformily with an applied high magnetic field. 

25 Appropriate high coercivity magnetic materials include a 
mixture of cobalt ferrite and other similar materials, 
such as rare earth ferroxides. The secure code may be 
encoded with the high coercivity magnetic material wfth 
zeros being denoted by regions with random polarity and 

30 ones being denoted by polarized regions. The high 
coercivity prevents ones from being later changed to 
zeros. 
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In the alternate embodiment, the low coercity 
magnetic strip 116 is lectromagnetically "encoded with a 
start code 18' for designating the beginning of the 
encoding, account information 20», and a verification 
code 22» . The account information includes an account 
number corresponding to the embossed account number and 
-an— expiration— date^ — The— ver i rf i cat r i on cod e~incIudes~ 



— — *mwj,uu& ^ a 

visual comparison algorithm code which designates one of 
a large plurality of preselected algorithms for 
10 generating a visual comparison code or check designation 
from the account code . An electronic comparison code 
includes a parity check and other electronic codes that 
indicate that the data in the electromagnetic strip has 
- no -t be^n al.texed.. — SpeciJ4ca-l-l- y, t he e-leet-rond-e 



15 comparison code includes a number that is a preselected 
function of preselected number positions in the account 
number. For example, it may indicate the number of 
digital ones therepreceeding, whether the sum of all 
preceeding numbers is even or odd, or the like. A card 

20 identification number is again related to the account 
code or other information on the card by a preselected 
algorithm. A personal identification number corresponds 
to a personal identification number assigned to the card 
owner by a preselected algorithm. 

25 FIGURE 7 illustrates an alternate embodiment of a 

verification circuit in accordance with the present 
invention. As the recording strip 112 moves past the 
read heads SO', 52* , the e lectromagnetically encoded 
information and the secure coded information are read. 

30 The start code 18' is received by a decoder 120 and a 
latch initialization controller 122 to identify the 
first bit of the account and verification codes. 
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An account code latch 130 stores the account 
information and a bank code latch 132 stores that 
portion of the account code which identifies the issuing 
bank. When connected on-line to a bank computer, a 

S modum 134 transmits the bank code to the bank computer 
as part of the transaction transmission. A visual 
comparison code latch 136 temporarily stores the visual 
comparison code " which is encrypted on the 
electromagnetic strip to provide an indication of which 

10 portions of the account number are to be highlighted on 
the display 56. An electronic comparison code latch 138 
stores the electronic code, a card identification number 
latch 140 stores the card identification number, and a 
personal identification number latch 142 stores the 

15 personal identification number (PIN) . An overflow latch 
144 determines if extra characters appear beyond the end 
of the properly encoded region. 

The account code latch 130 is connected with a 
display controller 150 for controlling the output, 

20 particularly the account number, on the man-readable 
display 56'. The visual comparison code latch 136 is 
connected with a decoder 152 which implements an 
algorithm for converting the visual comparison code into 
a designation of the selected positions or digits of the 

25 display 56' to be highlighted. A highlight controller 
154 causes the designated positions of the display to be 
highlighted, e. g. displayed with greater intensity, 
displayed in a different color, or the like. 

The card identification number latch 140 is 

30 connected with a card identification number decoder 156 
which implements a card identification number algorithm 
to covert the card identification number into the visual 
comparison code. A comparing means 158 compares the 
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visual comparison code from the card as decoded by 
decoder 152 with the visual comparison code as generated 
from the card identification number by the decoder 156. 
If the two fail to match, the comparing means 158 causes 
a bad card display generator 160 to generate a display 
indicitive of a bad card. 

—The electronic comparison code latch T38 1ls~ 
connected with a decoder 162 for, implementing an 
electronic comparison code algorithm for converting the 
electronic comparison code into the alphanumeric symbols 
which appear at the selected corresponding positions in 
the account information. A position selecting means 164 
selects the alphanumeric symbols from the corresponding 
gAsXtxons-of^the-aeeoufl^^ means 
15 166 compares the selected digits from the position 
selecting means and the decoder 162. If there is no 
match, the unacceptable card display generator 160 is 
again enabled. . ' " 

A date comparing means 170 compares the date read 
20 from the card with a preselected date from a date memory 
172 to verify that the expiration date read from the 
card is an appropriate date range. If the expiration ' 
date is not in the appropriate range, the unacceptable 
card display generator is again enabled. 
25 A keyboard 54» is connected with a personal 

identification number latch 180 to receive a customer 
keyed personal identification number. Decoders 182 and 
184 operate on the personal identification code as read 
from the card and the personal identification number as 
30 entered by the customer and a comparing means 186 
compares the two decoded personal identification 
numbers. If there is no match, the unacceptable card 
display generator 160 is again enabled. 
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An overflow latch reader 190 determines whether any 
bits of data are stored' in the overflow latch 144, If 
extra characters beyond the, proper code are read from 
the latch, the reader 190 again causes the unacceptable 

5 card display generator 160 to generate a corresponding 
bad card display. 

Upon presentation of a card, the merchant slides the 
card through the slot of the reader so that the high and 
low coercivity electromagnetically encoded information 

10 is read as well as the infra-red encoded information. 
Preferably, an erase head is placed in line with the 
high coercivity magnetic track to erase any low level 
magnetic recordings thereon, A man- readable display is 
generated of the account number or other account 

15 information with a subset of the account numbers as 
determined from the visual comparison code highlighted. 
The merchant compares the man-readable account 
information from the card with the man-readable display 
56*. To show that the merchant has made the comparison, 

20 the merchant marks the highlighted symbols of the 
alphanumeric display on the paper credit card receipt. 
If the merchant fails to mark the appropriate 
highlighted numbers, this provides an indication, that 
the merchant did not make the comparison and may be held 

25 responsible if the card has been altered or is a 
counterfeit. 

In yet another alternate embodiment, the high 
magnetic coercivity layer is embedded within the card 
and may be limited in shape, such "as by silk screening, 
30 to the logo of the company, an image, or the like. Upon 
polarizing the high coercivity material, the material is 
thereafter detectable, even if the polarity with which 
it is recorded is changed. As another example, the high 
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coercivity magnetic material may be placed under the 
embossed letters and may be magnetically polarized along 
the embossed letters. If an embossed letter is lowered 
by a forger and a new letter raised » the original letter 
is still readable from the polarized high coercivity 
magnetic material thereunder. 

— The-invention^K^blBenn descripted with reference to 
the preferred embodiments. Obviously, modifications and 
alterations will occur to others upon reading and 
understanding the preceeding detailed description. It 
is intended that the invention be construed as including 
all such alterations and modifications in so far as they 
come within the scope of the appended claims or the 

je.quijcalants-.thereof-s 
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Having thus described preferred embodiments, 
the invention is now claimed to be: 

1. A method of securing credit card transactions 
against tampering and counterfeiting, the method 
comprising: 

encoding card blanks with at least account 
5 information and a verification code to produce credit 
cards; 

verifying authenticity of one of the credit 
cards by electronically operating on at least a portion 
of one of the verification code and the account 
10 information with a preselected verification algorithm to 
generate an answer for comparison with at least a 
portion of the account information and the verification 
code. 

2. The method as set forth in claim 1 further 
including before the encoding step, the steps of: 

preparing the card blanks, each card blank 
having one of a plurality of relatively permanent, 
5 machine -readable secure codes; 

machine-reading the secure code of a selected 
one of the card blanks; 

receiving the account information of a customer 
for whom a credit card is to be prepared; 
10 . operating on at least a portion of the account 

information and the machine-read secure code with an 
encoding algorithm to generate the verification code, 
whereby the verification code is unique to the selected 
card blank and the account information* 
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3. The method as set forth in claim 1 wherein the 
authenticity verification step includes: 

electronically entering from the credit card 
the secure code and at least a portion of one of the 
verification code and the account information; 

■ the ste P of electronically operating on at 

least the portion of one of the verification code and 
the account information with the verification algorithm 
further includes operating on the secure code to 
10 generate the answer; and, 

comparing the answer with at least a portion of 
the account information and the verification code. 

— — 4^— The— method— ffs^e't— foT-t-h— in claim 3 further 

including after the authenticity verification step, the 
steps of: 

generating an authentication code by 
5 electronically operating on at least a portion of the 
account information and other electronic data with an 
authentication algorithm to generate an authentication 
code; 

displaying the authentication code; and, 
placing the authentication code on a receipt. 

,5. A method of securing credit card transactions 
against tampering and counterfeiting, the method 
comprising: . 

a) preparing credit card blanks", each card 
blank having one of a plurality of relatively permanent, 
machine-readable secure codes, the secure code being 
alterable only by physical alteration of the card blank; 

b) machine -reading the • secure code of a 
selected one of the card blanks; 
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10 c) receiving account information of a 

customer for whom a credit card is to be prepared; 

d) operating on at least a portion of the 
account information and the machine-read secure code* 
with an encoding algorithm to generate a verification 

15 code, whereby the verification code is unique to the 
selected card blank and the account information; 

e) encoding at least a portion of the account 
information and the verification code on the selected 
card blank to prepare a credit card; 

20 f) electronically entering, such as by key 

entering or electronically reading, at least a portion 
of the account information and the verification code 
from the credit card; 

g) machine-reading at least a portion of the 
25 secure code from the credit card; 

h) electronically operating on at least a 
portion of the entered account information, the entered 
verification code, and the machine-read secure code with 
a verification algorithm to generate an answer; 

30 i) comparing the answer with at least a 

portion of one of the entered verification code and the 
entered account information for coincidence; 

j) subsequent to determining coincidence in 
the comparing step, operating on at least a portion of 

35 the entered account information and other electronic 
data with an authentication algorithm to generate an 
authentication code, the other electronic data including 
data indicitive of at least one of an identification 
code for an electronic verification apparatus , a time 

40 code indicitive of when the credit card was verified, a 
currency amount of the sale, a random number, and the 
verification code from the card; and, 



WO 85/02927 W PCT/US84/02129 

2$ 



k) placing the authentication code on a sales 



r c ipt, 



6. An apparatus for securing credit card 
transactions against tampering and counterfeiting, the 
apparatus comprising: 



means for encoding card blanks with at least 
5 account information and a verification code to produce 
credit cards; 

verifying means for electronically operating on 
at least a portion of the verification code and the 
account information with a preselected verification 
10 algorithm to generate an answer for comparison with at 
— ; least— a — port-ion— of — the — account — i = nf armw i on and ^tK^ 
verification code to verify the authenticity of one of 
the credit cards, 

7, The apparatus as set forth in claim 6 further 
including: 

a source of credit card blanks, each card blank 
having one of a plurality of relatively permanent, 
S machine -readable secure codes; 

secure code reading means for reading the 
secure code of a selected one of the card blanks; 

an encoding algorithm means for operating on at 
least, a portion of the account information and the 
10 machine-read secure code with an encoding algorithm to 
generate the verification code, the algorithm means 
being operatively connected with- the card encoding means* 



8. The apparatus as set forth in claim 6 wherein 
the verifying means includes: 
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electronic entry means for - electronically- 
entering from the credit card the secure code and at 
5 least a portion of the verification code and the account 
information; 

a verification algorithm means for 
electronically operating on the secure code and at least 
a portion of the electronically entered verification 
10 code and account information with the verification 
algorithm to generate the answer; and, 

comparing means for comparing the answer with 
at least a portion of the account information and the 
verification code* 

9. The apparatus as set forth in claim 6 further 
including: 

an authentication code generating means for 
electronically operating on at least a portion of the 
5 account information and other electronic data with an 
authentication algorithm to generate an authentication 
code; and, 

a man-readable display for displaying the 
authentication code. 

10. An apparatus for securing credit card 
transactions against tampering and counterfeiting, the 
apparatus comprising: 

a) a source of credit card blanks, each card 
5 blank having one of a plurality of relatively permanent, 

machine-readable secure codes; 

b) secure code reading means for reading the 
secure code of a selected one of the card blanks; 

c) first encoding algorithm means for 
10 operating on at least a portion of received account 

information and the machine-readable secure code with a 
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first encoding algorithm to generate a first 

verification code, the first encoding algorithm means 

being operative!/ connected with the secure code reading 
■ L - > means ; • 

d) a se c o nd encoding algorithm means for 
operating on at least a portion of the account 
information and the secure code with a second encoding 



20 



algorithm to generate a second verification code; 

e) electromagnetic encoding means for 
encoding at least a portion of the account information 
and the first verification code electromagnetically on 
the selected card blank, the electromagnetic encoding 
means being operatively connected with the first 
encoding algorithm meatu s- " 

f) embossing means for embossing at least a 
portion of the account information and the verification 
code on the selected card blank, the embossing means 
being operatively connected with the second encoding 

so algorithm means; 

g) an electromagnetic read head for reading 
the electromagnetically encoded account information and 
verification code from the credit card; 

„ , h) a keyboa rd for electronically entering at 

least a portion of the embossed account information and 
verification code from the. credit card; 

U a secure code reader for machine-reading 
the secure code from the credit card; 

40 " ' . j) ■ * first v ^ification algorithm . means for 
electronically operating on at least a portion of the 
electromagnetically read account information and 
verification code and the machine-read secure code with 
a first verification algorithm to generate a first 
answer, the first verification algorithm means being 
operatively connected with the electromagnetic read head; 
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k) a first comparing means for comparing the 
first answer with at least a portion of one of the 
electromagnetically read account information and 
verification code for coincidence, the first comparing 

50 means being operatively connected with the 
electromagnetic read head and the first verification 
algorithm means; 

1) a second verification algorithm means for 
operating on at least a portion of the . key entered 

55 account information and verification code and the 
machine-read secure code with a second verification 
algorithm to generate a second answer, the second 
verification algorithm means being operatively connected 
with the keyboard; 

60 m) a second comparing means for comparing the 

second answer with at least a portion of the key entered 
account information and verification code for 
coincidence, the second comparing means being 
operatively connected with the second verification 

65 algorithm means; and, 

n) an authentication code generating means 
for operating on at least a portion of the account 
information and other electronic data with an 
authentication algorithm to generate an authentication 

70 code, the authentication code generating means being 
operatively connected with the first and second 
comparing means to be selectively enabled thereby. 
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